Security System Analyzer an OVAL Based Scanner
ID: eb1a7991-d04a-5964-8c4e-35a0232ef132
STIX ID: report--eb1a7991-d04a-5964-8c4e-35a0232ef132
Feed Name: Darknet
DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored credentials and session artifacts from major browsers (Chrome/Edge/Brave via an App‑Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS). It uses headless Chromium process injection and IElevator COM interaction to decrypt app‑bound keys, includes operational evasion techniques, outputs structured JSON for operators, and poses a realistic risk for account takeover, lateral movement, and persistent access in enterprise environments.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
